This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft File: DyFSGnEnFX99rwrQkTlK1aHM53k.mft (raw, json) Hash identifier: eB03r5U3/NZbU8O1VYSjXsbiU9+qG2nRyl36r4rW5DE= Subject key identifier: 2A:8B:82:FF:98:28:D4:11:D3:41:25:71:6F:B4:8B:82:50:E2:B2:A0 Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79 Certificate issuer: /CN=0f21521a7127157f7daf0ad091394ad5a1cce779 Certificate serial: 019B2219CA651BC491BD096F7D05DCC9F9C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft Manifest number: 1782 Signing time: Mon 15 Dec 2025 13:01:14 +0000 Manifest this update: Mon 15 Dec 2025 13:01:14 +0000 Manifest next update: Tue 16 Dec 2025 13:01:14 +0000 Files and hashes: 1: 2ruUNINuI6uV8MYI78EZQWS_RIg.roa (hash: VHS2lsqC+IJ5oxkyfws5q9amIcBNw+9L6nwp+Qj/0vY=) 2: 8i1g8XKNJedNWFOzfSsVo0JxCqM.roa (hash: qcd7n9F8BEzZZvgBgE1cIJu2JRF1Xvz0rV08SZQkPQw=) 3: DyFSGnEnFX99rwrQkTlK1aHM53k.crl (hash: yd0W0ppBKu5VVt9U9xRm1H0Ft7Y38nSdJXZWFw/Rax8=) 4: lXftion8-6bSPXb1hByWoZWZToE.roa (hash: SvWuwU45VoYUssTvSq8q7tUVCqlmbl2PlDyAIGIPVcs=) 5: m8rrUo6uiDcirMi6Sl7eYgFmoKs.roa (hash: ooZ40cwVnj6zMgLWzk/b928qzd5lbFKtSTI7ArxTES8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 16 Dec 2025 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:22:19:ca:65:1b:c4:91:bd:09:6f:7d:05:dc:c9:f9:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779 Validity Not Before: Dec 15 13:01:14 2025 GMT Not After : Dec 16 13:01:14 2025 GMT Subject: CN=2a8b82ff9828d411d34125716fb48b8250e2b2a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a3:44:f0:69:c9:99:f0:83:e5:39:a7:7d:f8: 67:b9:98:e9:0b:b7:d3:cf:c7:bf:34:38:da:73:1b: 11:64:78:78:05:03:63:3d:44:02:f1:9a:dd:2b:aa: b0:bf:92:bf:0c:ac:bd:0e:f2:d9:35:63:66:7e:46: 77:31:7a:a6:6f:f8:6f:3e:b1:0c:cc:26:a1:a0:8d: b5:e0:f1:87:d4:16:f0:13:6f:e8:ba:c0:b7:c4:fc: 9c:a2:7d:c3:d6:9c:8b:e2:39:fe:d4:7c:92:67:f3: 92:3b:ef:88:8b:d6:e5:8d:e3:6c:bf:d9:77:82:55: 22:e9:f2:b5:cd:42:fe:04:97:53:37:44:03:1c:ec: f8:c5:ff:06:9a:f2:d0:a6:28:69:fd:b4:c1:dd:32: 0e:cf:c8:5a:49:ce:08:f8:e5:25:14:34:2b:bb:fb: 40:61:84:a2:81:3d:9f:d2:c8:e2:ac:0e:34:70:5e: 5a:db:81:df:18:d4:9e:88:0d:9c:8b:3a:e7:4c:58: 7a:56:95:a6:d8:b8:23:43:b1:7a:14:ec:cd:27:b9: 1d:c3:cf:66:41:4d:20:20:85:62:39:80:ae:2e:6a: ac:a6:9f:99:e1:d4:94:f9:e1:21:ff:86:8c:ee:3b: 61:fd:36:15:c5:4f:c7:d0:f7:f8:e1:d8:d0:7a:96: f6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8B:82:FF:98:28:D4:11:D3:41:25:71:6F:B4:8B:82:50:E2:B2:A0 X509v3 Authority Key Identifier: keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:ca:1f:a3:04:d4:f6:83:1f:63:b3:eb:8f:b3:70:ae:9a:e9: 6b:37:7c:ff:da:06:19:a9:5f:bf:8e:f7:d8:2e:e9:23:2e:b0: a4:f4:07:63:a5:fc:a9:3e:8e:a6:af:54:a0:ed:45:63:cc:ce: b2:70:23:d9:cb:6b:59:87:bd:a1:b2:05:d7:14:13:c7:b8:63: f3:e7:19:8e:29:26:e7:1f:88:85:b6:00:5f:97:b2:e7:78:8e: e4:42:cc:9e:c4:9d:50:33:48:e0:e7:a2:00:7f:7b:a4:c2:6d: eb:e5:ed:15:45:44:d1:85:0c:a9:85:97:5e:f1:90:b6:7b:dd: dd:22:3d:94:cc:f9:2c:0a:e5:41:a6:38:46:5e:2e:2c:18:0d: 08:cf:78:8e:41:1b:3c:64:47:16:3c:87:48:9f:e6:ec:01:84: 9b:2e:e0:9a:00:e0:f4:ee:9b:fa:26:f8:b8:4d:8f:2f:b4:31: a6:bc:9f:73:61:6f:99:b5:a4:48:c1:e4:2c:44:5a:0f:a3:1d: 6e:17:87:93:79:75:7a:70:88:cb:0e:0d:04:7a:85:be:51:74: b8:0a:ac:27:dc:d2:38:0b:6a:b0:45:43:b8:e9:ba:e4:01:38: 03:de:d4:f9:aa:35:02:c4:10:43:1f:63:c7:d6:2d:96:c9:08: 47:24:61:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsiGcplG8SRvQlvfQXcyfnBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMjE1MjFhNzEyNzE1N2Y3ZGFmMGFkMDkxMzk0YWQ1YTFj Y2U3NzkwHhcNMjUxMjE1MTMwMTE0WhcNMjUxMjE2MTMwMTE0WjAzMTEwLwYDVQQD EygyYThiODJmZjk4MjhkNDExZDM0MTI1NzE2ZmI0OGI4MjUwZTJiMmEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA06NE8GnJmfCD5TmnffhnuZjpC7fT z8e/NDjacxsRZHh4BQNjPUQC8ZrdK6qwv5K/DKy9DvLZNWNmfkZ3MXqmb/hvPrEM zCahoI214PGH1BbwE2/ousC3xPycon3D1pyL4jn+1HySZ/OSO++Ii9bljeNsv9l3 glUi6fK1zUL+BJdTN0QDHOz4xf8GmvLQpihp/bTB3TIOz8haSc4I+OUlFDQru/tA YYSigT2f0sjirA40cF5a24HfGNSeiA2cizrnTFh6VpWm2LgjQ7F6FOzNJ7kdw89m QU0gIIViOYCuLmqspp+Z4dSU+eEh/4aM7jth/TYVxU/H0Pf44djQepb2LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqLgv+YKNQR00ElcW+0i4JQ4rKgMB8GA1UdIwQY MBaAFA8hUhpxJxV/fa8K0JE5StWhzOd5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHlGU0duRW5GWDk5cndyUWtUbEsxYUhNNTNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lODMxYjEtOWVjMC00NmYyLTg2MGQt ZmFkNWZkNzk3MGJhLzEvRHlGU0duRW5GWDk5cndyUWtUbEsxYUhNNTNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMi9lODMxYjEtOWVjMC00NmYyLTg2MGQtZmFkNWZkNzk3MGJh LzEvRHlGU0duRW5GWDk5cndyUWtUbEsxYUhNNTNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFcofowTU 9oMfY7Prj7Nwrprpazd8/9oGGalfv4732C7pIy6wpPQHY6X8qT6Opq9UoO1FY8zO snAj2ctrWYe9obIF1xQTx7hj8+cZjikm5x+IhbYAX5ey53iO5ELMnsSdUDNI4Oei AH97pMJt6+XtFUVE0YUMqYWXXvGQtnvd3SI9lMz5LArlQaY4Rl4uLBgNCM94jkEb PGRHFjyHSJ/m7AGEmy7gmgDg9O6b+ib4uE2PL7Qxpryfc2FvmbWkSMHkLERaD6Md bheHk3l1enCIyw4NBHqFvlF0uAqsJ9zSOAtqsEVDuOm65AE4A97U+ao1AsQQQx9j x9YtlskIRyRhTw== -----END CERTIFICATE-----Generated at Mon Dec 15 20:46:28 2025 by rpki-client